Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d3:e2:6c:61:8f:0b:03:6c:c1:2e:fd:ea:16:6e:4e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
        Validity
            Not Before: Mar 31 00:00:00 2024 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: CN=tunnel-api.catonetworks.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:fc:1a:c4:28:b6:b5:fb:0a:55:a7:44:29:
                    e4:3b:8b:39:2b:77:90:26:c3:6d:1c:4a:35:53:df:
                    47:19:34:fe:b0:4a:dd:05:38:2a:aa:c6:49:b9:d8:
                    ee:02:84:20:ff:c6:cc:95:77:58:66:2a:90:5a:be:
                    5c:db:8e:06:4a:ed:08:40:98:37:13:bc:c5:8d:85:
                    4d:99:da:8c:69:ff:0d:70:5e:d2:a2:f0:cd:47:5e:
                    bb:6f:bf:ee:c4:4d:92:21:02:9c:b7:9e:0c:7a:15:
                    59:09:c6:b0:fd:f6:b9:c8:26:e1:62:99:81:84:ef:
                    2d:b5:77:c9:5f:ca:5f:b9:8a:57:ed:ac:35:ec:e6:
                    ea:8f:ee:0b:e0:05:b6:d0:34:2e:13:a5:4e:b7:f8:
                    d8:52:1e:82:4d:aa:83:d2:69:ed:a5:45:f1:03:ba:
                    54:e6:7f:0f:be:91:28:d9:5b:1d:13:c2:ec:1a:a5:
                    f1:a2:b3:c6:4a:63:12:39:a0:a8:09:05:d4:8f:29:
                    ca:2e:05:f4:ef:c8:ca:ad:61:81:c5:91:74:ce:2f:
                    44:2f:e4:9a:08:90:90:7c:08:86:af:41:9f:18:4c:
                    12:e4:c9:e9:87:8b:b5:34:95:7b:2e:e4:56:99:38:
                    c5:ea:ac:97:58:ab:43:cc:d9:73:c4:65:35:61:9c:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
            X509v3 Subject Key Identifier: 
                39:F4:CA:7A:02:43:81:1E:96:49:30:0D:BB:35:FD:DB:DF:A7:A8:36
            X509v3 Subject Alternative Name: 
                DNS:tunnel-api.catonetworks.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.r2m03.amazontrust.com/r2m03.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.r2m03.amazontrust.com
                CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 31 09:03:42.679 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CE:07:71:E8:76:25:A6:74:DF:DB:2F:
                                A2:CE:66:08:78:8A:74:C7:85:8C:DC:03:F1:FF:EF:F8:
                                1B:10:47:80:AA:02:21:00:DF:DC:9F:BC:B8:55:E0:0B:
                                E1:76:A2:B5:BF:9B:00:A4:E9:FF:21:1A:CB:D7:18:92:
                                5A:D1:17:10:64:CA:34:75
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 31 09:03:42.606 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:23:C3:13:EA:20:47:67:EF:9F:7A:DA:99:
                                F2:6A:BC:93:50:18:C2:7C:A5:99:5A:41:27:1C:9A:5C:
                                F4:9D:80:A0:02:20:5C:D0:46:2F:97:46:2F:15:88:3F:
                                6E:60:65:3E:82:6D:9E:45:2F:1A:06:5C:35:C5:79:C8:
                                BA:23:A9:D8:7A:6E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 31 09:03:42.633 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CE:8E:C8:CA:09:EC:6D:AF:42:E0:A5:
                                B7:4E:71:7F:08:DB:A9:D6:09:44:CD:AB:19:EC:4F:FD:
                                70:0D:AA:AA:F3:02:21:00:BC:C1:78:B7:1E:93:79:E3:
                                C3:31:F8:36:B9:2D:0A:C0:98:70:18:ED:65:31:AA:43:
                                F4:2C:0A:4F:7B:98:0F:B3
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0a:98:d3:c3:a2:3b:78:37:6a:59:5a:4c:58:14:e7:6e:59:2f:
        25:0b:78:f4:f8:61:84:91:40:f2:92:11:a9:a7:6e:f4:46:6b:
        01:a7:92:ea:00:f2:3f:15:17:78:6e:15:b9:84:4e:d5:02:80:
        be:4e:f4:4e:5f:3e:b7:a1:cc:78:64:9a:fd:23:09:56:43:e9:
        86:03:f0:95:c7:f9:d3:fc:c0:db:c7:6d:9a:f0:73:b5:70:ec:
        e3:69:94:8f:bf:48:21:d8:35:78:62:ac:3f:82:4d:de:9e:9f:
        a6:7b:41:7b:5a:ce:89:18:dd:b9:6d:9f:28:0b:b2:fc:d4:d1:
        53:27:b9:7c:65:0e:d7:fe:64:3e:0a:d0:3d:c8:1a:ee:cb:83:
        26:a5:76:72:9b:47:05:8e:ff:27:c8:7a:8f:2d:73:41:60:05:
        89:c7:06:e0:bb:86:80:6b:3e:1d:5a:99:b9:fa:86:7e:ed:66:
        e0:cc:2f:c5:19:d2:8b:8c:d0:ff:40:ed:1e:7a:39:8c:75:99:
        3b:46:98:95:4f:13:29:7c:44:3d:09:2b:26:7f:b7:06:3b:8f:
        cd:be:f1:56:a1:2c:e0:eb:12:67:38:21:55:ec:2e:59:fa:2f:
        7a:22:49:0e:04:70:39:f5:03:c3:48:5e:ab:48:b9:fa:cc:22:
        b0:ac:24:e1